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(57) Abstract: 

PURPOSE: To surely realize security management 
among domains (network system) A, B, and C having 
different kinds of equipment in a system in open 
decentralized environment. 

CONSTITUTION: At an optional position in a network, a 
TTP (reliable 3rd party) for security management 
covering plural domains is provided, and a security 
policy setting and modifying means for the whole network 
NW1 and an access control decision means which 
controls and decide access covering plural domains 
according to the security policy are provided there. 
When there is requests to register security policies PA 
and PB from the domains A and B (managers MA and 
MB) (1), the TTB compares PA and PB from points of 
view of regulations of OS I such as certification, access 
control, and secrecy and absorbs differences in 
expression by mapping generate a security policy P which 
has no contradiction on the whole. On the basis of P, 
various security management such as access 
permission/inhibition decision making is performed. 
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(57) \mm 

aSrfifOF^-O (*-^9-^^fA) A, B, C 
Ug#oT1z*rLU7S'lf3£^S&«>£>TTP flUg 

^-r^A^B (v*s;-vma, Mb) ^^tJpi'jf 
-fiKUi'-PA, PB^^S^&Si: (0) , TTB 

tip A , pb&> wb, Tt-txmw, wmm* osi 

-<^U^-PS:f^t-5, ZLOPtcS^TT^irx^g 
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fe^-T^&JI^^^^X^A^lCfc^T, *y 

^fetfXDTTP&KW", afjIBTTPtC, ^^hC-^i/ 
X^A^CD-fe^rn. »J ^-f jK'J £/- fcttfrt" -Sir^ U 

iyx^uz^Lrz-t^v^^mwmm^i^ mm 
mi9ffi(D*-7y&jfflmmizi3ttzi>3r3.v9--<m 20 

[ft*«3] *y h«7-*^*^A£^LTSa«3*i 

h S/^-r AfigfcEltfo £1z3f a. U ^-f W&Zfite 
ot~&e>TTP$:mi% ZLOTTPfC, Ws5*vh!7 

So 

tWBTTP^WfS-fe^a.UT-WJKU 
tSt^ra U «8fg$:S^f Sit-ST^U >T- £/3 >^ 

&m 1 *:v*L4 a>wr*i*» i faj&©*-y>&^3s±g 

[«fE<Z)f$fflfct89i] 
[000 1] 
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[0 0 0 2] 

K£5fctf>£tfl5] EDI (Electronic Data Interc 

hange) ->f>EFT (Electronic FundsTransfer) 

U. { gmtfmmiZf£Z )o LAN (Local Area Network) 
WAN (Wide Ares Network) fe^LfcSSWtaiS 

:/>&:#ffcS9£T' if© J; e> tC-fe 3f a. y ^-r Sr#A*i««fe 

[0 0 0 3] B^%, *<y S<7-?>>;VrA{Cfctt-5ir3f 
a'Jf-f ICOV NT 14. H3 V ^5*aBBT-e<Z)Mffi*^ai(. 
l4*lT H*C & -f, *fclC^fr&»&Sg#i^ 

atiTv^v\ mix iso (wmwmmm •. inte 

rnational Organization forStandardization) T*14, 
t^aiJf-<7-^fi'^i:o^TSC2 1/WGl 
T% H^l^Bf^-f 1 7;U J ij XAfCo HTSC2 7 /W 
G2T', ^X-^AlSffiMT'CD-trdrrLU-^-rtCO^TSC 
2 1/WG4T\ ^ft^TlfcfjhSjflT^S. 14 

^■SS/X-rATfc, flfii/X7 i Ai:g§^'t-5IIS{CiTfetC-fe 

^ra-y-r-fSHBA^^tc^s. #tc, -fe^riy^-rtco 

^^(C^oT<S©t45tHT-S)S„ ^(D^pOtibtC, 

^ - y > teftmmxom h^=l 

[0 0 0 4] t#ay-r--f3WU2/-'(Sc^fi«* 
$t) <D^(4> OS I-fe^r^.y5 : --l'^^-A'7-^3t-- 
Ati'a.- (IS0/IEC CD 10181-1) T*M^SnT^-5„ 

[0005] jmmzmmLte*=LV j r4mj£L 

Tt4. #P»§^4 - 3 4 2 0 5 (Xttl ) ^>#g§ 

¥4-3679 5 9-9^8 tti^2) St) c #M¥4 - 3 
6 7 9 6 0f^« (XK3) »CK(RSnfcaE»linWae)*l 

'>^^A®iuffl«BiiE36r*SfcBs-rs»9i-e*y, an^ 

e>© n ^>^{ciSpgf 'Jffl#iSliEffi#^=i > tf a - ^ 
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W(CJ:y, *y r-9-4"t3S/*-rAT\ 

C0006] z.ftibomm$~ ^-rnb i oc^fA 

^©Iz^ay^tBIB&SiaSLT^Stf. ftfii/X^A 
[0 0 0 7] 10 

[isw^is?*L «t e> n+zmm) ±$&m i ~ 3 tcise 

[0 0 0 8] jfefc. tS6SW«^©fci5T»%^U«nfc 

^ttngascDBBHtatiT^*. osi (Mttas/^-r-A 

#S8g$e : Open Systems Interconnection) "P&tUiifc 
40 fcbTOS-I«aiCJ:oT»lS*U OSIJHW) 

Aj SftoTV^^. o*y. OS IfS*?(iD-M 30 

5. 40 
[0 0 0 9] OSI'KlffllPgDBT'fcSMIB 
(Management Information Base) "eHi, OSI 

fJfflStlSi/^AT'CD-T 1 -^, StfO S I J/XfAH 

*SnT^* rf L*»U OSITtt. £/*7 i A<Z> < £3l7' 

H&API (Application Program Interface) ICOV* 
"Oi^atlTl^fc^COT?, ODP (Open Distributed 
Processing) ©i^&J^&U^l/TMZ^y-r-flS 
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*-r A, *»/ by— 9 fflZSgtf o &#L&fr b ir 3f3. "J -7- 

y *3$xw.-*t=.#>\z\imm.v-7 hQx.7Km#timi&i 

[0 0 10] fcfe. $^{C^5p4 - 2 4 8 

0 5 9^<#f#f*ffi|g CKT, r 5fcKU fcvO) tcfevN 
T, loCMOM Cr*S?irrt-^r*S?ir) W:/5/* 

T&vanstftoff&x.* bzwt&emt x. 
v b<m&mmi5i&*:mmLtc.t>\ £©«-?». 
?y%&immzi&\ vr, * v h?-* s/^-t-arkcmf 

[0011] vAt<7)5mmMT'(D<gm fc-fe^ny-r-r© 

HH£>e>. *-^>4M»9BS-e®«ai:-fe*a.y-?^ 
©PfcfcS^ 7Vb&2^**fc©K:tt?>c© 3 j&ftBKi? 

[0012] ®77' l J>r->>3^->XTA, *«V 

ho 

[00 1 3] (2) reaisLi snuv&^j/^fAt© 

[0 0 1 4] <3>^X-rA©«3aT^y-?r-S/.ai/{cflBI 
D B CD*- fcf* $ -frS A P I UK;i/7? 

[0 0 15] flEoT, #W5!©B«Itt. J:IBt£5fci£fl5© 

lCj3V>T, r^'^r-i/a^*^ h^-^i/X^APa 

tC, 9ER©*y hC-i'S/^-T-ASrlz^ra.y-r-r 

V^^;*-rAT?©;*-;/S;;n* h©<B3I#T*g, SOW 5 " 
A©«B7:/y*-S/sMCfli^-*K-xa>*-if 

x srfui a-es a p 1 momm* woi/x-mfe u 

[0 0 16] 

^feftfflTTP (Trusted Third Party : iS$%X'gZ>%i 

s/-i»E#si:, tdiB-fe^o. y -5^ jK'J s/- $:je&f 
•rs-fe*3.'j7 i ^3j<ye/-3Sff#mi:> tuia-fe^y-^ 

-f >KU ^-©^(C{£oT*>y h^-^ S/*t-A|SBc» 
^A^^Ufct*ay-r-^«»MlS:JK«. 
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[0 0 17] j£ic iottpi:, m&Z>*v bv-t 
i/^h,(Dit^V^b^ m&&m*"f*J*9'VR. 

H9-*S/X^A<DV*£/^£flS0D*>y h9-^5>X 

£*;0)T'3dSo *£. ZICDTTPJC, buIE^^M^- 
^x? h£!uiB**y h^-*^fAffl^^fflt 

[0 0 18] JglC, ffifBBTTPs&^i-S-fe^aU^ ' 

tcflB-t S -fe ^ a y ^ flMg S: 3«f a «S 7 ^ U -ir - 2/ a 
^5 AW - 7 x-X £J|gt-f£ : btf)T*&So 
[0019] 

M^B] ±IB«J*tC«t5<f£M£l&BJi-f.5 0 20 

[0020] *&wiz£h& *-7y*smaffxm 

H^^feftfflTTP (Trusted Third Party, JIS 
CDX5004#ffiD &MWfe3fc&<8«fcUO*$. ZICOT 

dpx y ^ iraw«e«»cieHTgs. 30 

[002 1] (1) t^xU^ jK»JS/--©*PI 
M^hC-^^fAH «V?ft— oflMz^rxU-?- 

ftlil^xy^^y >>-,Cj:yi^$;ftT^5. Ufr 
U t*a'Jf-f K*-f (ftfitf>-fer*xy-5^ 

*x y 7-4 #y i/-<DWfeswmmR& K* -f ymiz 

&fr<b-t*3.V7 L J fmmX'gZ (04, @5) . £. 
(-fe^U-r-f K*W» P^C5§£ Lfciz^xy^g 

¥H 5:«liE-r S 3 £ #T'£ 5, 
[0022] ( 2 ) IMftfr^'x * h^^^E^UCD 50 
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y -f - -< -f >ra.c * r * -fex &*f& o * 

®©!I#.CJ:»A **^2>x* M*»Z*£tt&^?- 
ZZttfT'gZfzSb, rga^j LT^&V^X-^A 
T'©^-7'^x^ h«JI#WC*<& (08-011) „ 

3*ie>©«Jifctt. fyia^ts i ©jsaa-^x* bw& 
w&tt sfjfli -r * z i #t*£ So 

[0023] (3) t^a'Jf^^^L/-i'3>(iD 

jwwsws-fedpx y-r-^^gs^^ i/- i/ a >^>ji«{c j: 

y, i/Xf : -ACD^|T7 p y>r-f>3>fCff#DBcD-t>— 
brx£#J/S$i±5:i£:#T*£.5 (01 2) . 
[0024] R±tf)«fc e».{C LI, *-7y3mmtT'(D 

-2/3 i/X^ A, * >v h O - ? ffiizmtfi o fc#L£> 

S/X^AT'©;*-^!* hjtflgSSTfS, S^lCi/X^A 

©lar^y s/ 3 i/- s> 3 > zmffk-t 3 Z\ 
£#T*££o *#8W»c«fcy, mk<n*v bv-vy^ 

[002 5] 

[mmm] jartc *«w©nsfiws:Hiiifcj:yajWB'r 

So 

[0026] 0 1 li. *«W©-*S6W.c <k s-fe ^px y 
-r-i' ( i : S ; eT r ;i/©ii«*f^i: «ts ^>v bv—t ^x^A 
<D#|gSc0T*fe5o l^0T'. A, B, S:t>*Cli-fedrxy-r 
A K^W > (*^y h^-^fS^/X^A) , NW1, - 

tt)Ett*<y h»7-*. WS1, WS 2, , WS8(i 

V-9*7—i/ay, Rt*;U-^T'fe-5o *m&®lT° ; 
tt, |eI0{C3t-t «fc O tefflSKDBM* v bV-VNWl 

y^x.-zyT.'rMzmmztiz. %vbr)->?yzk7- 
A^co-fe^xy-^^ &n^-r-g > -fe^xy-r'f , i^i : ET r 
;i/&*llgUT^.5. 0i<DMT'ii, M$cco-fe#xy^ 
k^-oa, b, c^e>*>v bv-vimm*tiTiE> 
y. ffifi3^9-^7f-i'3 >^mst±> K^W 

T-iiM&zfflm&m&ttg' < & o t ^So 

[0027] ^1 ^>y hC-^r^C^ofe-fedrxy 
1.1 ir^xy^fsKy^-O^ 
12^, OS Ifl W^MC^ottJFa'Jf^fl 

sr-rs^^i/cD^i^aca msimzizMfa-rzTTBO) 

ttfN)8fciT.a 04l±02(Cfe^-2>-fedrxy : r-f /Ky i/ 
- <£>-#] S:^-t0> 0 5 1*0 3 O-SPT'fe S 

-fe ^ x y 7- ^ tK y 2/ - CO/n*^ ^ - ^ j*«Wi£0>-0!IS:^ 
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^JlT-ltZv h 1 ?-^ V*2»M A , Mb, Mct>mm 

jWSSStiTHStf. #v*2>>(Z><tgfSBS:Sx.;kgp 
#lCo V \T tt:3fc#)T ifCD J: e> &iz =5f a. U 5=" -f # U 2/ - 

^yfmmmz&w&os i v^^-vc^i^ 

[0 0 2 8] ®2tl2I3(C^-rJ:e>lC. Hfc^OSIf 
ii©K*-f>Ai; K*>f>B (&fc, ^TT'tt, — «f fc ' 

-f >®v^ 2>> (Ma^O-TVIb) fr^iWMZti 
fcTTP&Kjfcu -?-<Z>TTP{CF*-f>A£: F*-f> 
B(Z>±^CD-fe^n 'J # 'J £/- P ZmZ-tt&^TJl 

^'JS>-P A S.^PB5:TTPtC^l|*-rs «D) . 

TTPli, F*-f >A©t*a'Jr-f 3KUi/-P 
Ai: K^-f>BcD-lr^fa.'J^-C^Ui/-PB?:> S8IE, 7 
?t^M», ^tt. $&SH£, <y h (Audit : 

IBS) ^0OS IWa'Jf-f 7L/-Ar?-^T'^$ 

tf > y £f? e> 3 £ iC J: y M F* -f ><Z>-fe *a U ^ -< aK U 

■fe^rzLU-x^^'J^-P^fS-rs (@) . ZlCO-fe^ 
'J -r-f jKU >- P (C^5(, *T K^^f>Ai: F^-OB© 

[0 0 2 9] tfria^^^i/CD^oD^ibtcii. -fe^n. 

tfM (it$<#?£) CD-fllfcg^SXMS 5 (Cjfrf. 
H4.&0fH 5 T*ti, F* -f > AtfHr =*a. y ^-f * U £/- 
Pa&. SSHE. 7*-fex«W. 5S£tt, «M£t£. *-tt 

-f, 3*i&©y^5i*PA, PB#2/*^Atf>*{B^ffA 

(Cli, P5F*>f>A» B©iz3f:a.y^7Ky 2/-CDA^ 
[0 0 3 0] @20)^|^T ; ;i/$:^g^-XT'#^.S 

TTPic«$g5c©*-y hv-?m/*Tl*<D-t* 

e>^2/X7^A#£«T*&5. fllxJiE! 6 Rtm 7iZT 
TP£;*y N9-i"il^TAA (K*-f>A) fflv 
* * cor^T-f t& trfiS 7 * * x1H»jK 'J 2/ - ic»r J 
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h9-?t»X^AA2fcI>**y h9-^^gi/X^A 
B (F*Y>B) li. SEtCF*^ ymiZZ%tfZ>T>7±x 
ftmizz>\, ^M©t^a U -r-f JKU 2/- PA>&t>'PB$: 
TTPtC^S^^T'fe^^-t^,, ^rAB0Y^i/t 
MB^Cfc^^fy f>-P B (D^3S5l# (©) ^2/^-r-AACD 
sKU 2/- PAiCf^f £&{3:-m£ (m»ffl8fiyitt*«* 
S»^*:ir. fib»»BIl 0#HS) ICtiU TTP^iy^T" 

AA©v^i»M A {c*fLTii*n-r53i: «2» 

10 T'S>€) 0 «ffcJC*«y h"7-^^S^X^ACCDV 

* 2/>McA\ >r^(C!f #5 7 * -fe X«PtCO I \ 
ma'Jf^U i/-Pc?:TTP{C^J|# «2» 
-TS^-tCii. ifTTPtCi/^-r-AC&gSSELTte) 
ofc (©) ±T% tfctJKU Sz-PcOKSiD^jKU S/-P.A 
^PB»C^#?:&«t^{Cti, TTPlii/^^AA 

^.i>'B<Dv*i» (Ma, -Mb) izftLxmn-tzzLt. 
(®) 

[0031] m&izFtjymizmtfzTt-tx 

20 m8RXm9iZBt, MSlZBLt-ZplZ. TTPtt 
-Y >WlcaWte 7 ^ -fex$!M{Co ^ y .2/ - 
P A . PBfttfPc&*flIl/TV\-5fctf>, f>X5=-AACDV 
^2/>MA(i^-7'2>'3L^ h 3 002/^^6^(07^12^ 
^*<0 «TglCO ^TliTTP tClffl^tt* e>^ V % 

((D) . TTP-Ptt^f AAC^i^ h afflSfi 
il^X^ABCD^^'ai^ hbCOMtt (^1501 5, E 
1 6#fl?J ZttfjKU 2/- P A , PB&JtlW-SifclCJ: 
'J, *Zfi?^>? ha©7^-fe^pJW$:^l»rU -€-©^ 
$rM A {C^I^i±S (®) . 7.^-fe^M^KO^JirrCOig^T' 

30 tfT^x* h b(D|»^^tC^of-^-(Cli, TTP 
ti2/^7=-ABCDV*2?-V{C7f-^3i^ h b ^ggi--5^SE 
W$BA I b&^^it-S ((2X3)) . 

[0 0 3 2] 1. 2 ^S«itt©a« 
TTPlCtt, !^EfiligS:mS3t{Cj;y2/^A^ 

10 IH^^#iiE (guarantee) «flBtiil«'t6. l^EfillB 

M A li, 2/X5\kAftT'&ffiU£iZ*a.y-r.fft#£T 
TPlC$g^-rs ((D) . TTP^BtflBfg^SraHi:*.^ 

£2/X-7^A;&tfB{C#LTf&frfS (©) . 

[0033] i. 3 mmmmnim 
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ife^SECD^totC^TStl-SCe rtificate* 

-f > jWte3M-*«K#r L/ v ^$mmm £fp y fit" 3 £ iz 

So g| i t^tg<Dit»JS:H 1 2 &t>*H 1 3 izakt. K 
^-f>v*y-vM A 2ia t MB« c «ffUfe«* «D) (c*f 
LT. TTPJitt&^BKbS/^T-AA&OfBfC^LTBB 

^-r-s (©) . 

[0 0 3 4] 1. 4 ^SS^aJfilBCDliA 
Wl&F *Jy l/—A\t> — & T'ffijz SftT V*-£> «fc e> &Siff© 

«WP5-2 68 59 5-^ (0SH2) © r*. y hV — V 

[003 5] H2 ■OSI«aK^-f>IWId»S««ofct 
^i/x £ SNMP HOOfe 

2. l <x&S K*-f xMr-fitx.? km ' 

^b^v^^ma&umbi^ flasks y g K*-f 

[0 0 3 6] N9-^^|2/^-rA©^-^ 
x^hOi^^|^rfeZ)-^«:SSg25feSl r^fcry 

1 4 ICaVfS/X-r A (No.O) tfTTPlOHSU 
•r-A (No.l-n) ##<*MIB (Management Information 

Base) &#feK*>f>raK:*fc#S7*-fcXfcfr3* 
^yxirhftfl3If*. -g-L/T, TTP©MIBtT*« 

bizM-r&mmm mi 5, hi 6) 

J/^-T-Ara^tgf^tCtiCM I P (ConunonManagemet Info 
rmation Protcol) S:gJ^5#, *7 hC-^fli'?. 
rA^SNMP (Simple Network Management Protco 
1) TfeottMIBS^f- hfftia-^i* h 

[0 0 3 7] t^x^ha, b, cCDBN^rt 

LTfi£§ie7M'f45:^-rHT'$)-g>„ HKfCN®*fN<@<Z> 
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m^rm&t^o. hi skswj^ic, ttzrv^t 

r bj r CJ PWKIC^yyx^hb 
fctt r a j r C j *-JVx.9 bcizte r a j rbj 

#S:ja3R^T/Wxi:UTSSt-r*i4:»C«fcy, 

10 [003 8] £e>ic. *zr*j3L>; hcoft$goo^irffi^fc 
*©fcatcj@jWW££:ap:ALfc. Hi 6U5fifttlKE0>ff 

tt. *7*i?x^ h a<&iEfln®tt<J[Hfi# r 2j frfb T3j 

tcswt-rsfc, fi2^7g§^c&s;t:/i;x* r-b;&tf 
c<z)iIMlx : k f2j r3j fcscfbs-rr^s. r 
© «fc e> \z. \Z7&^ms*vtz.&*-7Vx. 9 v oymam 

^l/TttTTP^Uff-rS. 
[0 0 3 9] 2. 2 ;*:/^x* hl^D^CD^ 
20 t^a'JrYtl^f^T?, 2. UZBLt^^iZ^ # 

HSrlSi-rSfcfttCti, HI 5T'^L^<ke>^#?f^ 
x^ K®flW8®»^&^^«rfc^*-e*6. «E 

IH$feJSil-etl^LT^S^f^x^ hO^^|^i£$: 

S5ffl-rs a hi i\t*7Vx.v vo>£sm.vmm^ m$ 

\z*7V^>7 NtWI©3ESfS:ff«:-5^2?x^ hi^# 
a©^!cH, H 1 8 \tm 1 7 (C*f^-r -5 T T P CDWUm. 
mm. H l 9 l±H l 7 jc^fjC-f S^-^"i?x hft^OGBr 
30 «F©^ffi^ft5:^-rHT'$)S„ HI 7{C^-r«te>{C, 

(CttTT P t#S/XrArat'liCM I PtCg-3<l£fE£ 
ff^). HI 7~H1 9lZ£>')%;m&M<Dmtt%: 

[0 0 4 0] (D ^fAAffl^'x? NtC^D^ 

S/^-rAA©x-s;x>h«liBaM}'*^»U ^ 
X"rA>A<D-?*-iSvmifeffiftlza-j];i7n 

[0 04 1] © Ig^^&^X^AAttTTPtCML/ 

40 xmrn^z. 

[0042]® T T PCDI- yx > h^fggP^i/^ 
fAAO^x? h{C^l5^^$:TTPCDV*-i/' 

[0043]® TTPli ^?:^nLfe^-^x^ 
hiltfiSgti'rBg^T'^ftl^^x^ h&TTPCDM 
IB T {C«J:y|^^ .RS-rSS/^T-AB©i-s;x>h 

[0044] ^3 flfttacl^xU^l^Tr^U-^ 

3 > 

50 i/X^ACDlfSTyy^-S'aXCOS ia^T'*»Jffl$ 
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mfflZmt. i/^f^AOD^ST^U >r- i> a > A Pic 

iCAPISrM^S. 02OM:, ZKmz^U^I^TT? 
&<D-#J£^-tSi9!0T*&.g>. 02 o<z>#lT'ttu Jk<m 
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